This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/FcXUetsC0-6bv54Z1lmHoqKMdxM.roa
File: FcXUetsC0-6bv54Z1lmHoqKMdxM.roa (raw, json)
Hash identifier: dFkWAsnbwOvbQKILV1fPns+xMo4goiFme2jYhULRvHk=
Subject key identifier: 15:C5:D4:7A:DB:02:D3:EE:9B:BF:9E:19:D6:59:87:A2:A2:8C:77:13
Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial: 019B76EBA54D7C88D50C3FC9FB7D19EF535D
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/FcXUetsC0-6bv54Z1lmHoqKMdxM.roa
Signing time: Thu 01 Jan 2026 00:18:33 +0000
ROA not before: Thu 01 Jan 2026 00:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214678
IP address blocks: 45.148.74.0/24 maxlen: 24
45.148.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:a5:4d:7c:88:d5:0c:3f:c9:fb:7d:19:ef:53:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
Validity
Not Before: Jan 1 00:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15c5d47adb02d3ee9bbf9e19d65987a2a28c7713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:f0:68:b2:91:f7:9a:e4:6b:2b:72:04:96:
a0:48:83:23:0a:95:24:c8:14:ce:9d:72:6f:98:4a:
d0:41:24:ae:db:9f:cb:29:2f:89:f8:e5:34:1c:f5:
39:5a:78:02:3f:48:d6:55:a4:e6:c5:79:02:da:ed:
0b:7e:9e:b0:0a:2d:17:82:ed:67:04:cc:5f:fe:55:
fa:a8:46:23:88:9e:39:a0:2d:e0:69:ac:df:a7:a5:
e0:ec:df:f5:6a:fe:41:89:a1:e9:7d:4c:fe:3b:1f:
cc:4d:50:33:47:bc:93:e9:a0:a3:68:d8:19:7d:dc:
0f:3d:34:43:c5:49:72:cd:be:48:46:a2:48:19:72:
ed:25:6d:76:2d:d0:35:07:49:70:46:44:85:ce:51:
75:9a:10:35:29:74:11:28:d7:10:a0:8a:7b:50:70:
1b:fb:53:af:f9:8f:3e:01:8b:66:8c:c0:f6:c3:4b:
e8:00:24:af:85:4d:6a:02:1f:a3:80:ef:14:fa:2d:
14:e7:45:ca:23:a0:4d:59:48:c9:fa:92:2d:a6:30:
4d:ec:fe:0f:76:6d:4e:5a:98:e7:36:25:9a:54:92:
54:d1:9c:24:13:ea:57:2c:3a:57:8d:da:40:14:e4:
17:da:8b:8e:78:05:81:ca:91:6e:40:c9:ce:99:17:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C5:D4:7A:DB:02:D3:EE:9B:BF:9E:19:D6:59:87:A2:A2:8C:77:13
X509v3 Authority Key Identifier:
keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/FcXUetsC0-6bv54Z1lmHoqKMdxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.74.0/23
Signature Algorithm: sha256WithRSAEncryption
78:f6:af:f0:77:58:3e:ee:32:3a:2e:6b:3f:af:6c:25:30:8b:
89:a4:8c:4d:6c:e1:83:1a:1b:c8:3e:fd:83:03:82:86:c3:b5:
5e:ef:f2:f9:67:fb:24:e4:fe:6b:bd:c0:ee:73:b6:ca:98:15:
6e:f1:c6:b6:d1:36:6c:92:a4:2c:ca:ea:45:3b:4d:2c:6a:73:
e3:8a:e1:d4:05:84:85:5b:d6:63:dc:d2:be:96:16:94:62:b8:
5d:75:d8:23:0a:14:00:73:5f:4c:63:fe:34:65:ee:53:59:6c:
1b:2e:0a:44:d0:7a:7f:74:17:b9:b9:44:44:38:58:57:de:25:
69:31:b9:44:b4:36:17:65:b4:d5:31:5a:5c:c0:2f:e0:20:6b:
92:cd:1e:cb:7b:c9:02:8d:89:fd:53:d6:a7:ff:e2:4b:00:df:
59:04:cc:c9:02:67:ff:55:17:0c:76:01:ae:65:0a:f9:a6:16:
c6:29:66:94:63:d0:1d:de:11:d8:7d:9f:d8:7f:8a:3e:09:a8:
f5:ee:c9:5f:d0:e8:95:a0:63:f8:23:01:4c:68:a0:95:bd:2e:
6f:f5:d4:a4:3a:b2:5b:20:66:fb:46:8a:89:1d:85:a4:42:92:
10:29:aa:04:ab:f7:2e:96:0f:11:34:4b:8d:ca:54:c0:f4:b3:
81:2c:4d:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt266VNfIjVDD/J+30Z71NdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy
Mjk5Y2EwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWM1ZDQ3YWRiMDJkM2VlOWJiZjllMTlkNjU5ODdhMmEyOGM3NzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqHwaLKR95rkaytyBJagSIMjCpUk
yBTOnXJvmErQQSSu25/LKS+J+OU0HPU5WngCP0jWVaTmxXkC2u0Lfp6wCi0Xgu1n
BMxf/lX6qEYjiJ45oC3gaazfp6Xg7N/1av5BiaHpfUz+Ox/MTVAzR7yT6aCjaNgZ
fdwPPTRDxUlyzb5IRqJIGXLtJW12LdA1B0lwRkSFzlF1mhA1KXQRKNcQoIp7UHAb
+1Ov+Y8+AYtmjMD2w0voACSvhU1qAh+jgO8U+i0U50XKI6BNWUjJ+pItpjBN7P4P
dm1OWpjnNiWaVJJU0ZwkE+pXLDpXjdpAFOQX2ouOeAWBypFuQMnOmRfVJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBXF1HrbAtPum7+eGdZZh6KijHcTMB8GA1UdIwQY
MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt
ZWE3YWU3MmJkMzJkLzEvRmNYVWV0c0MwLTZidjU0WjFsbUhvcUtNZHhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUtZWE3YWU3MmJkMzJk
LzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZRKMA0G
CSqGSIb3DQEBCwUAA4IBAQB49q/wd1g+7jI6Lms/r2wlMIuJpIxNbOGDGhvIPv2D
A4KGw7Ve7/L5Z/sk5P5rvcDuc7bKmBVu8ca20TZskqQsyupFO00sanPjiuHUBYSF
W9Zj3NK+lhaUYrhdddgjChQAc19MY/40Ze5TWWwbLgpE0Hp/dBe5uUREOFhX3iVp
MblEtDYXZbTVMVpcwC/gIGuSzR7Le8kCjYn9U9an/+JLAN9ZBMzJAmf/VRcMdgGu
ZQr5phbGKWaUY9Ad3hHYfZ/Yf4o+Caj17slf0OiVoGP4IwFMaKCVvS5v9dSkOrJb
IGb7RoqJHYWkQpIQKaoEq/culg8RNEuNylTA9LOBLE0A
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:56:22 2026 by rpki-client